Re: Clarification: SSL Client: Need of keystore?

2019-08-14 Thread Enrico Olivelli
Il mar 30 lug 2019, 20:49 Jörn Franke ha scritto: > Hi, > > I have a kerberized Zookeeper cluster and would like to add SSL on the > client side and to the quorum. > > So far the server configuration is clear. However, according to > >

Re: Clarification: SSL Client: Need of keystore?

2019-08-14 Thread Andor Molnar
Hi Jorn, I cannot test this unfortunately, because I don’t have a working Kerberos environment at the moment. If you comment out keystore.location, ZooKeeper won’t start, because it’s unable to build the TrustManager. Would you please try to create a fake (possibly empty) truststore and see

Clarification: SSL Client: Need of keystore?

2019-07-30 Thread Jörn Franke
Hi, I have a kerberized Zookeeper cluster and would like to add SSL on the client side and to the quorum. So far the server configuration is clear. However, according to https://cwiki.apache.org/confluence/display/ZOOKEEPER/ZooKeeper+SSL+User+Guide I need to specify on the client side